CVE-2005-2454

IBM Lotus Notes 6.5.4/6.5.5 and 7.0.0/7.0.1 are affected by insecure default permissions on the Notes directory (Everyone: Full Control), enabling local users to gain unintended access and modify, add, or delete files in that folder. The issue is due to default folder permissions applied to the N...

CVE-2006-3114

PC Tools AntiVirus 2.1.0.51 uses insecure default permissions on the "PC Tools AntiVirus" directory, which allows local users to gain privileges and execute commands...

CVE-2006-3114

PC Tools AntiVirus 2.1.0.51 is vulnerable due to insecure default permissions on the PC Tools AntiVirus directory, allowing local users to gain SYSTEM privileges by accessing and manipulating application files. The issue arises from granting Everyone Full Control on the directory and all child ob...

Linux-HA Heartbeat 1.2.3/2.0.x - Insecure Default Permissions on Shared Memory

// source: https://www.securityfocus.com/bid/19186/info Since Linux-HA Heartbeat has insecure default permissions set on shared memory, local attackers may be able to cause a denial of service. Exploitation would most likely result in a system crash, loss of data, and resource exhaustion, leading...

[SA20445] Sun StorADE Privilege Escalation Vulnerability

---------------------------------------------------------------------- Want to join the Secunia Security Team? Secunia offers a position as a security specialist, where your daily work involves reverse engineering of software and exploit code, auditing of source code, and analysis of vulnerabilit...

CVE-2006-0023

Microsoft Windows XP SP1 and SP2 before August 2004, and possibly other operating systems and versions, uses insecure default ACLs that allow the Authenticated Users group to gain privileges by modifying critical configuration information for the 1 Simple Service Discovery Protocol SSDP, 2...

CVE-2005-2454

IBM Lotus Notes 6.5.4 and 6.5.5, and 7.0.0 and 7.0.1, uses insecure default permissions Everyone/Full Control for the "Notes" folder and all children, which allows local users to gain privileges and modify, add, or delete files in that folder...

Lantronix Secure Console Server SCS820SCS1620 - Multiple Local Vulnerabilities

Lantronix Secure Console Server SCS820SCS1620 - Multiple Local Vulnerabilities source: https://www.securityfocus.com/bid/14486/info Lantronix Secure Console Server SCS820/SCS1620 devices are susceptible to multiple local vulnerabilities. The first issue is an insecure default permission...

Lantronix Secure Console Server SCS820/SCS1620 - Multiple Local Vulnerabilities

source: https://www.securityfocus.com/bid/14486/info Lantronix Secure Console Server SCS820/SCS1620 devices are susceptible to multiple local vulnerabilities. The first issue is an insecure default permission vulnerability. Attackers may exploit this vulnerability to write data to arbitrary files...

CVE-2004-2203

CVE-2004-2203 affects Ansel 1.2 through 2.0. The vulnerability stems from insecure default permissions, which can allow remote attackers to access web-readable directories. The available connected documents confirm the affected product versions and the underlying issue (default permissions), but ...

Insecure Default Service DACL's in Windows 2003

To the list, In my documentation of the Default DACL on Windows 2003 Services, I have found and confirmed the following: Both the Distributed Link tracking Server Service and Internet Connection Firewall Service have the Default DACL of Everyone:Full Control, which basically lets anyone connect t...

Sun J2EE/RI 1.4 / Sun JDK 1.4.2 - JDBC Database Insecure Default Policy

source: https://www.securityfocus.com/bid/9444/info It has been reported that multiple JDBC database implementations include insecure default security policies. This could expose vulnerable databases to denial of service attacks. This could also permit remote attackers to execute arbitrary comman...

Easy File Sharing Web Server 1.2 - Information Disclosure

source: https://www.securityfocus.com/bid/8777/info Easy File Sharing Web Server has been reported prone to an information disclosure vulnerability. The issue presents itself due to insecure default permissions set on folders that contain Easy File Sharing Web Server log and configuration files. ...

InterSystems Cache 4.1.155.0.x - Insecure Default Permissions

InterSystems Cache 4.1.155.0.x - Insecure Default Permissions source: https://www.securityfocus.com/bid/8070/info It has been reported that the permissions set by default on the files and directories comprising InterSystems Cache are insecure. The permissions on directories allegedly allow for an...

InterSystems Cache 4.1.15/5.0.x - Insecure Default Permissions

source: https://www.securityfocus.com/bid/8070/info It has been reported that the permissions set by default on the files and directories comprising InterSystems Cache are insecure. The permissions on directories allegedly allow for any user to overwrite any file. This creates many opportunities...

phpGroupWare 0.9.13 - Debian Package Configuration

phpGroupWare 0.9.13 - Debian Package Configuration source: https://www.securityfocus.com/bid/4424/info PHPGroupWare is a freely available, open source groupware system written in PHP. It is distributed and maintained by the PHPGroupWare project. Debian packages of PHPGroupWare ship with an insecu...

Beck GmbH IPC@Chip does not adequately validate user input thereby disclosing sensitive network data via crafted URL

Overview An insecure default configuration in the Beck IPC@CHIP allows an intruder to obtain priviledged system information. Description The Beck IPC@CHIP is a single chip embedded webserver. The Beck IPC@CHIP ships with a cgi script named "ChipCfg". Using a specially crafted url, an attacker can...

Sambar Server 4.x5.0 - Insecure Default Password Protection

Sambar Server 4.x5.0 - Insecure Default Password Protection source: https://www.securityfocus.com/bid/3095/info Sambar Server is a multi-threaded HTTP server for Microsoft Windows and Unix systems. Sambar Server provides insecure default protection for user passwords. The default password...